Privacy Policy

1. Who we are

Mita7 is the public-facing brand through which ARK Logitech provides technology, consulting and digital-engineering services.

References to “Mita7”, “we”, “us” or “our” in this Policy mean ARK Logitech acting through the Mita7 brand.

Our services may include AI strategy and advisory, digital transformation, application engineering, data platforms, analytics, machine learning, workflow automation, API integrations, web and mobile development, billing solutions and technical enablement.

Where we determine the purposes and means of processing personal data, we may act as a data controller or data fiduciary, as those terms apply under relevant law. For a specific client project, we may act as a processor or service provider and process personal data on the client’s documented instructions under an applicable agreement.

Depending on the circumstances, applicable laws may include India’s Digital Personal Data Protection Act, 2023 and rules in force, the EU General Data Protection Regulation (GDPR), UK GDPR and applicable US state privacy laws.

2. Personal data we collect

We seek to collect personal data that is relevant and reasonably necessary for the purposes described in this Policy. The information collected depends on how you interact with our website or Services.

2.1 Contact and professional information

• Name, business email address and telephone number.
• Company or organisation name, job title and professional role.
• City, state, country and business location.
• Enquiry, consultation, proposal, demonstration and partnership details.

2.2 Client project and service information

When you engage our Services, we may process information needed to plan, deliver and support the engagement, including:

• Business requirements, project briefs, proposals and statements of work.
• Meeting notes, communications, feedback and support tickets.
• Technical documentation, architecture notes, source code and integration requirements.
• Authorised datasets, prompts, test materials and AI or automation inputs.
• Project-delivery records and collaboration information.

Client confidential information is handled under the applicable services agreement, data-processing agreement and documented client instructions.

2.3 Website and technical information

Depending on the technologies enabled on our website, we may collect:

• IP address, browser type and version, device type and operating system.
• Referring website or application, pages viewed, links clicked and interaction events.
• Session duration, access timestamps and diagnostic information.
• Security logs, error logs and approximate location inferred from an IP address, where available.

2.4 Marketing and event information

Where permitted by law, we may process newsletter preferences, event or webinar registrations, communication preferences, language preferences and records of business emails, calls, meetings and responses to business communications.

2.5 Billing information

For paid Services, we may process billing contact details, business addresses, applicable tax identification details, purchase orders, invoices and transaction records. We do not intend to store full payment-card numbers, CVV/CVC codes or bank credentials on our systems. A payment provider may process payment information under its own terms and privacy policy.

2.6 Information from other lawful sources

Where lawful and relevant, we may receive information from client-authorised systems, approved service providers, public professional or business sources, or third parties in connection with business enquiries, service delivery, security or legal compliance.

3. Sensitive personal information

We do not intentionally seek sensitive or special-category personal data unless it is necessary for a defined service, legally permitted and covered by appropriate instructions and safeguards.

Please do not send passwords, API secrets, government identifiers, health data, biometric data, financial-account credentials or other sensitive information through general website enquiry forms or ordinary business emails unless the information is specifically required and an appropriate secure method has been agreed.

If a project requires sensitive or specially protected information, the parties should establish the applicable legal basis, permissions, security controls, retention arrangements and contractual responsibilities before processing begins.

4. How we collect personal data

We may collect personal data directly from you through:

• Website enquiry forms, demo requests and consultation bookings.
• Email, telephone, messaging and virtual or in-person meetings.
• Client onboarding, contracting, project delivery and support.
• Events, workshops, webinars and training sessions.

We may also collect technical information through server logs, cookies and similar technologies, subject to applicable consent requirements. In addition, we may receive information through client-authorised systems, approved service providers and lawful business sources.

5. Purposes and legal grounds

Depending on the relationship and applicable law, we may use personal data to:

• Respond to enquiries and arrange consultations or demonstrations.
• Prepare proposals, negotiate agreements and manage client relationships.
• Provide, operate, maintain and support our Services.
• Perform authorised AI, data-platform, analytics, automation and integration work.
• Operate, secure, troubleshoot and improve our website.
• Send service updates and permitted marketing communications.
• Manage billing, accounting, tax, regulatory and contractual obligations.
• Detect fraud, prevent misuse, investigate security incidents and protect our systems.
• Resolve disputes and establish, exercise or defend legal claims.
• Manage a potential merger, acquisition, financing, restructuring or asset transfer.

Legal grounds for processing

Depending on your location and the processing activity, our legal ground may include:

• Performance of a contract or taking steps you request before entering into a contract.
• Compliance with a legal obligation.
• Your consent, where consent is required.
• Legitimate interests, where permitted by applicable law and subject to relevant rights.
• Another lawful basis expressly permitted by the applicable legal framework.

Where consent is required, we will request it before the relevant processing begins. You may withdraw consent with comparable ease where required by law. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. AI, automation and client data

Mita7 may provide AI consulting, machine-learning, analytics, data-platform, application-engineering and workflow-automation Services. Such work may involve processing information supplied by a client or accessed through client-authorised systems.

6.1 Purpose limitation and confidentiality

We will process client data for the agreed project purposes and in accordance with the applicable contract, data-processing agreement and documented instructions. Client information will not be used for unrelated purposes except where authorised by the client or otherwise permitted or required by law.

6.2 General-purpose AI model training

Approved third-party AI, cloud or software providers may process data as necessary to deliver a contracted service. The applicable provider settings, data-retention controls, contractual terms and model-training policies must be reviewed for the particular service being used.

6.3 Safeguards

Depending on the project and the controls implemented, we aim to:

• Minimise personal data used in AI and automation workflows.
• Restrict access to authorised personnel and approved service providers.
• Use anonymised, pseudonymised or synthetic data where feasible and appropriate.
• Apply appropriate technical, organisational and contractual safeguards.
• Assess relevant risks and maintain suitable human review for consequential uses.

6.4 Client responsibilities and AI outputs

Clients are responsible for ensuring they have the rights, permissions, notices and lawful authority necessary to provide personal data or third-party data to Mita7 for processing.

AI-generated outputs may be inaccurate, incomplete, outdated or biased. Unless expressly agreed otherwise in writing, AI outputs should be reviewed and validated by appropriately qualified people before they are relied upon, particularly for legal, financial, employment, safety-related or other consequential decisions.

Further service-specific terms, professional limitations, intellectual-property provisions and liability terms should be set out in the applicable Services agreement and Terms of Service.

7. How we share personal data

We do not sell personal data. We may disclose personal data where necessary, proportionate and lawful to the following categories of recipients:

• Authorised personnel: Employees, consultants and contractors who need access for their work.
• Service providers: Hosting, cloud infrastructure, email, CRM, communications, analytics, payment, security and development providers, where used.
• Professional advisers: Legal, tax, accounting, audit and insurance advisers.
• Client-authorised recipients: Project stakeholders, integration partners and platforms needed to deliver an agreed service.
• Authorities and legal recipients: Courts, regulators, law-enforcement bodies or other parties where disclosure is required or otherwise permitted by law, or necessary to protect rights, property, safety or security.
• Business transaction parties: Parties involved in a merger, acquisition, financing, restructuring or asset transfer, subject to appropriate protections.

Where a service provider processes personal data on our behalf, we seek appropriate contractual protections addressing authorised purposes, confidentiality and security.

We do not share personal information for cross-context behavioural advertising as described under the CCPA/CPRA. The application of this statement and the website’s actual tracking configuration should be verified before publication.

8. International data transfers

ARK Logitech is based in India. Depending on the Services and providers used, personal data may be processed in India or other countries where approved hosting, communications, analytics, security, payment or project-delivery providers operate.

Where applicable law requires safeguards for international transfers, we will use an appropriate transfer mechanism. Depending on the circumstances, this may include:

• A recognised adequacy decision.
• European Commission Standard Contractual Clauses.
• The UK International Data Transfer Addendum or another permitted UK mechanism.
• Data-processing agreements and transfer assessments where required.
• Supplementary technical and organisational measures, such as encryption, pseudonymisation and access controls, where appropriate.

The applicable mechanism depends on the parties, destination, data involved and law governing the transfer. For client projects, the relevant data-processing agreement and documented instructions also apply.

9. Cookies and similar technologies

Our website may use cookies, pixels, local storage and similar technologies to support functionality, security, preferences, analytics and marketing. The technologies actually used depend on the website’s live configuration.

9.1 Cookie categories

• Strictly necessary cookies: Support essential website operation, security and core functionality.
• Analytics and performance cookies: Help measure traffic and understand how visitors use the website.
• Functional cookies: Remember optional settings and preferences.
• Marketing cookies: May measure campaigns or support advertising where enabled.

9.2 Consent and preferences

Where required by law, non-essential cookies and similar technologies should remain disabled until the necessary consent has been obtained. Visitors should be able to accept, reject or customise optional categories and later change or withdraw their choices.

The actual operation of the website’s cookie banner and consent-management tool must match these statements. Please do not rely on this wording as confirmation that a consent tool is already installed or configured correctly.

You may also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including service delivery, relationship management, security, legal compliance, accounting, dispute resolution and enforcement of agreements.

Retention considerations

• Enquiries: Retained for the period reasonably necessary to respond and manage the related business relationship.
• Client and project records: Retained under the applicable agreement, operational requirements and legal obligations. A five-year period after engagement completion may be used if adopted as the actual retention practice and confirmed as appropriate.
• Billing and tax records: Retained for the periods required by applicable law.
• Marketing records: Retained until you unsubscribe or request deletion, subject to necessary suppression records and legal obligations.
• Technical and analytics records: Retained according to operational needs, legal requirements and the configuration of the relevant provider.

When personal data is no longer required, we will delete, anonymise or aggregate it where appropriate, subject to lawful retention requirements, contractual obligations and applicable backup cycles.

11. Data security

We aim to apply reasonable technical, organisational and administrative safeguards appropriate to the nature of the information and the risks involved. Depending on the service and the controls actually implemented, these may include:

• Encryption in transit and, where appropriate, at rest.
• Role-based access controls and least-privilege access.
• Multi-factor authentication for supported systems.
• Secure environment configuration, monitoring and access logging.
• Security updates, vulnerability management and testing.
• Confidentiality obligations and appropriate vendor assessments.
• Incident-response and recovery procedures.

No website, network, software, AI system or storage method can be guaranteed completely secure. We cannot promise absolute protection against every unauthorised access, loss, alteration or disclosure.

If a personal-data breach occurs, we will assess it and notify affected individuals and relevant authorities where required by applicable law.

You are responsible for protecting your credentials, securing your devices and using appropriate networks when accessing our Services.

12. Your privacy rights

Your rights depend on your location, the nature of the processing and the law that applies. Subject to legal requirements and exceptions, you may have rights to:

• Request access to personal data held about you and information about its processing.
• Request correction, completion or updating of inaccurate information.
• Request deletion or erasure in eligible circumstances.
• Withdraw consent where processing relies on consent.
• Object to or request restriction of certain processing.
• Request data portability where applicable.
• Opt out of certain sales, sharing or targeted advertising where applicable.
• Receive information about relevant processing practices.
• Lodge a complaint with a competent privacy regulator.

These rights are not absolute and may be subject to identity verification, legal exceptions and applicable response periods.

12.1 India

Where applicable under India’s Digital Personal Data Protection Act, 2023 and the rules and provisions in force, individuals may have rights relating to access to specified information, correction, completion, updating, erasure, grievance redressal, consent withdrawal and nomination. The precise scope, procedures and commencement of individual provisions depend on the law and rules in force at the relevant time.

You may first raise a grievance using the contact details in this Policy. Where the applicable legal framework permits, you may escalate the matter to the competent authority after following the relevant process.

12.2 European Economic Area and United Kingdom

Where the GDPR or UK GDPR applies, individuals may have rights to access, rectification, erasure, restriction, objection, portability and withdrawal of consent. You may also have the right to complain to the relevant supervisory authority.

12.3 California

Where the CCPA/CPRA applies to our activities, California residents may have rights to know, access, delete and correct certain personal information, opt out of qualifying sales or sharing, and receive equal treatment when exercising their rights, subject to legal exceptions.

ARK Logitech states that it does not sell personal information or share it for cross-context behavioural advertising. The applicability of California law and the website’s actual data practices should be assessed before relying on this statement.

13. How to submit a privacy request or complaint

To exercise a privacy right or raise a privacy concern, contact us using the details below.

Please include:

• Your name and preferred contact email.
• Your country or state of residence.
• The right you wish to exercise or the concern you wish to raise.
• Sufficient detail to identify the relevant processing or information.

We may request proportionate additional information where necessary to verify your identity and protect personal data from unauthorised disclosure. Please do not send passwords or unnecessary sensitive identity documents.

We aim to acknowledge and respond within the period required by applicable law. If you are dissatisfied with our response, you may have the right to escalate your complaint to the relevant regulator.

14. Children’s privacy

The Mita7 website and Services are primarily intended for businesses, professionals and organisations and are not directed to children.

We do not knowingly collect children’s personal data through the website in circumstances where such collection would be unlawful. If a specific service requires the processing of children’s data, that activity must be separately assessed and handled in accordance with applicable requirements, including any required parental or guardian consent.

If you believe a child has provided personal data improperly, please contact care@mita7.com so that we can assess the matter and take appropriate action.

15. Third-party websites and services

Our website may contain links to third-party websites, platforms, embedded content or services. Those third parties may collect information under their own privacy policies, terms and settings.

We do not control third-party websites or services outside our control and are not responsible for their independent privacy practices. Please review the relevant provider’s policies before using its services or submitting personal data to it.

16. Changes to this Policy

We may update this Privacy Policy to reflect changes in our Services, technology, providers, legal requirements or business practices.

The Effective Date at the top identifies the current version. Where appropriate, material changes may be communicated through a website notice, email or another suitable method.

17. Contact us

For privacy-related questions, requests or complaints, please use the contact details below.